Analysis
-
max time kernel
152s -
max time network
121s -
platform
windows7_x64 -
resource
win7-20231020-en -
resource tags
arch:x64arch:x86image:win7-20231020-enlocale:en-usos:windows7-x64system -
submitted
02/11/2023, 21:07
Behavioral task
behavioral1
Sample
NEAS.25e76f1b3464988fbbf649d19dc212c0_JC.pdf
Resource
win7-20231020-en
Behavioral task
behavioral2
Sample
NEAS.25e76f1b3464988fbbf649d19dc212c0_JC.pdf
Resource
win10v2004-20231023-en
General
-
Target
NEAS.25e76f1b3464988fbbf649d19dc212c0_JC.pdf
-
Size
38KB
-
MD5
25e76f1b3464988fbbf649d19dc212c0
-
SHA1
02b523ef5377e6a347cd7ac0ba5825a245bdd330
-
SHA256
a8d256217c24a3ab6644e11106ee592017eb8818e70c43616acde28cbddfc13f
-
SHA512
7471a5f39029ac2e26faa8b4ba0e683959e9182cb0cd7dd677b1cf2c9b4d05b5fd5099643e26123c63828a722d06678cf021ef9b3808049c46d534aca0e8d1bf
-
SSDEEP
768:FzT9pnNPoJLbMqH483k1YMWV3iKl1MDf0QR1xwAlMcuTavOtbmqkbhVRJtz0Id:FvfWJLAAKyVn40QR1+AGDaEiqm7z7d
Malware Config
Signatures
-
Suspicious behavior: GetForegroundWindowSpam 1 IoCs
pid Process 2040 AcroRd32.exe -
Suspicious use of SetWindowsHookEx 4 IoCs
pid Process 2040 AcroRd32.exe 2040 AcroRd32.exe 2040 AcroRd32.exe 2040 AcroRd32.exe
Processes
-
C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe"C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\NEAS.25e76f1b3464988fbbf649d19dc212c0_JC.pdf"1⤵
- Suspicious behavior: GetForegroundWindowSpam
- Suspicious use of SetWindowsHookEx
PID:2040
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
3KB
MD56bb969787e02effdbf5385dd2696911b
SHA12f059a1569e96ed5e07c8d2d349848bb6ff32e23
SHA2564405c766c39253a33baf0d03b3864d9ff30d430dfb5e690e3dd23888418dccf4
SHA5120e02b2f6e5fcf07ea513c06b96856ab66efa0c2db9d200ae67a89a47225c0c22f2b11987ffa270aa85b0375af41fec016533e20111b3b9dccd72d03aba70216c